Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File:                     Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier:          +Ltrl6BMhihU0r1n/dobZ8DFPyrBmYLvib2cmGEtjQE=
Subject key identifier:   A3:8B:12:73:88:90:F4:DE:4F:19:7E:64:2A:23:B6:2A:95:75:54:72
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer:       /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number:          75
Signing time:             Thu 23 Jul 2026 06:35:29 +0000
Manifest this update:     Thu 23 Jul 2026 06:35:28 +0000
Manifest next update:     Thu 30 Jul 2026 06:35:28 +0000
Files and hashes:         1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: LYy1X0cphsFT7Ow+OYVvD0sPVIG0sRSyP3AhAa1Gdr8=)
                          2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: My8bbZyTvpN44ycJe7YDuAWa7grPMOBDyAIg81uBjQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
                          rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
        Validity
            Not Before: Jul 23 06:35:28 2026 GMT
            Not After : Jul 30 06:35:28 2026 GMT
        Subject: CN=6a61b631-6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:aa:6d:f8:a3:3b:36:13:9c:08:c9:b1:54:
                    ca:2a:bd:46:7d:0a:35:27:29:a4:72:05:d3:70:34:
                    84:0c:cf:aa:a2:2e:51:a3:d0:9a:ef:15:d6:9a:83:
                    26:83:8a:76:d3:be:80:21:31:cf:8e:4a:ca:82:fc:
                    b2:d6:f6:e7:a5:39:5c:9e:13:12:65:45:21:cf:12:
                    6f:00:89:a6:bf:03:f0:ea:c4:58:db:e3:d8:ff:84:
                    8b:83:ac:10:7b:17:1c:d4:0d:8f:5f:5d:4c:98:21:
                    c1:d6:1a:c5:13:ca:10:8a:b4:5c:d5:b5:d5:be:cf:
                    2f:cf:9e:79:af:88:cb:5c:8a:07:13:cf:30:68:b1:
                    b3:91:fd:b8:dc:03:bf:8b:1c:c4:f3:1f:4b:fa:3a:
                    39:09:3f:62:d8:e1:ca:0e:62:63:46:ae:aa:8f:2d:
                    ab:0c:83:57:b9:82:0a:f6:6e:c7:26:ff:56:1e:f5:
                    ca:34:a3:c9:ba:89:fd:50:75:29:84:1d:ff:09:e8:
                    1c:6a:e0:f9:94:d6:e4:c9:22:a7:da:e2:7b:da:64:
                    0e:ff:54:1e:e1:10:90:6b:73:54:a3:9c:c9:0f:ad:
                    53:6d:85:55:6b:81:35:48:e2:7d:19:5c:fd:8e:15:
                    72:a3:59:ec:76:d9:4a:24:48:d8:b4:cc:66:f3:45:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:12:73:88:90:F4:DE:4F:19:7E:64:2A:23:B6:2A:95:75:54:72
            X509v3 Authority Key Identifier:
                keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:18:ec:54:f6:ce:fe:2f:ba:03:ac:b2:d2:ca:a5:d7:e0:
         aa:0a:e2:d0:72:98:a2:5b:12:da:de:77:fe:31:d8:38:20:bf:
         86:2a:ee:7a:32:16:81:46:8f:ab:4f:e1:38:69:7c:d0:62:fc:
         34:24:69:0c:84:04:f5:22:9e:fb:cb:35:c4:ae:80:27:33:a2:
         8d:7c:67:84:bf:e1:72:14:08:01:48:7e:75:2c:21:bc:49:6c:
         ea:22:d4:10:c6:88:be:af:d4:cf:16:85:f3:e6:eb:85:a0:e4:
         3d:30:8f:1a:9d:43:20:d2:c9:6e:23:a6:52:46:ac:3f:0b:e5:
         d8:35:c0:4d:60:79:42:76:89:82:78:1b:ad:e8:39:f1:86:69:
         f8:40:03:bb:bb:d8:b9:34:2a:d9:78:43:cc:a5:97:88:7e:b0:
         29:7a:76:ab:26:89:e0:7a:57:cd:a4:d1:0f:d8:18:96:fa:d9:
         da:f7:0a:ad:88:e1:9a:79:49:e9:bc:49:3d:7c:e7:f6:d8:30:
         35:b6:54:be:8a:c5:64:df:58:67:e5:3a:c2:fc:fa:8d:30:65:
         cd:2d:69:f9:d7:9c:ca:0e:db:72:c6:88:37:ff:66:c5:23:0f:
         98:9f:c1:f1:a1:44:25:09:30:99:69:c2:2b:ea:ca:d0:9e:77:
         b4:60:30:5e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTkzMjExMC8GA1UEBRMoMzYzOERGQTNCOTg1NkExNUFEOUQ1NDMwNkI1QkY3MDYz
MEY2MzY0NjAeFw0yNjA3MjMwNjM1MjhaFw0yNjA3MzAwNjM1MjhaMBgxFjAUBgNV
BAMTDTZhNjFiNjMxLTY4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCR56pt+KM7NhOcCMmxVMoqvUZ9CjUnKaRyBdNwNIQMz6qiLlGj0JrvFdaagyaD
inbTvoAhMc+OSsqC/LLW9uelOVyeExJlRSHPEm8Aiaa/A/DqxFjb49j/hIuDrBB7
FxzUDY9fXUyYIcHWGsUTyhCKtFzVtdW+zy/PnnmviMtcigcTzzBosbOR/bjcA7+L
HMTzH0v6OjkJP2LY4coOYmNGrqqPLasMg1e5ggr2bscm/1Ye9co0o8m6if1QdSmE
Hf8J6Bxq4PmU1uTJIqfa4nvaZA7/VB7hEJBrc1SjnMkPrVNthVVrgTVI4n0ZXP2O
FXKjWex22UokSNi0zGbzRQPtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo4sSc4iQ
9N5PGX5kKiO2KpV1VHIwHwYDVR0jBBgwFoAUNjjfo7mFahWtnVQwa1v3BjD2NkYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzJBNUU4QjAyREM5
MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhXdG5WUXdhMXYzQmpEMk5r
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTmpqZm83bUZhaFd0blZRd2ExdjNCakQyTmtZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx
OTMyLzJBNUU4QjAyREM5MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21GYWhX
dG5WUXdhMXYzQmpEMk5rWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCE6BjsVPbO/i+6A6yy0sql1+CqCuLQcpiiWxLa3nf+Mdg4IL+GKu56MhaBRo+r
T+E4aXzQYvw0JGkMhAT1Ip77yzXEroAnM6KNfGeEv+FyFAgBSH51LCG8SWzqItQQ
xoi+r9TPFoXz5uuFoOQ9MI8anUMg0sluI6ZSRqw/C+XYNcBNYHlCdomCeBut6Dnx
hmn4QAO7u9i5NCrZeEPMpZeIfrApenarJongelfNpNEP2BiW+tna9wqtiOGaeUnp
vEk9fOf22DA1tlS+isVk31hn5TrC/PqNMGXNLWn515zKDttyxog3/2bFIw+Yn8Hx
oUQlCTCZacIr6srQnne0YDBe
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:07 2026 by rpki-client